Re: [Snort-users] Source 0.0.0.0 Destination 0.0.0.0

From: twig les <twigles(at)yahoo.com>
Date: Sat Mar 29 2003 - 17:16:57 EST

I get those all the time because our proprietardy firewall mangles packets and no one knows why. Throw TCPdump on the wire and sniff for those src/dst and get the full packet. When I did that I found the culprit via MAC address and saw that the checksum was invalid.

• Nels <nelsbels@amerion.com> wrote:
  > Ladies and Gentlemen,
  

> ATTACHMENT part 2 application/ms-tnef name=winmail.dat

---

---

Know yourself and know your enemy and you will never fear defeat.

---

---

Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com

---

This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There! NetWorld+Interop Las Vegas 2003 -- Register today! http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Sat Mar 29 17:37:38 2003